Re: CVE-2009-1883 kernel: missing capability check in z90crypt

[Eugene Teo <eugeneteo () kernel sg>]

Eugene Teo wrote:
> There is a missing capability check in the z90crypt driver in the Linux 
> kernel. This missing check could allow a local, unprivileged user to 
> bypass intended capability restrictions. Thanks to Solar Designer for 
> reporting this issue to us.
>
> Note that this does not affect upstream anymore.

Reference:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-1883

Thanks, Eugene